winbind krb5 locator in samba utilities

Uri Simchoni urisimchoni at gmail.com
Wed May 13 02:18:04 MDT 2015


Hi,

I see that there's winbind krb5 locator to do site-aware KDC lookup, but
when a samba utility that needs Kerberos runs (i.e. using kerberos directly
and not via winbindd) it uses all the site-aware logic already, and
essentially builds a custom krb5.conf file based on found servers.

Does this mean that the krb5 locator is useful only for non-samba apps?
Wouldn't it be prudent to disable the locator in samba apps (just as
winbindd does - using env variables)?

Thanks,
Uri


More information about the samba-technical mailing list